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Abstract. This paper creates and analyses a new quantum algorithm called 
the Amplified Quantum Fourier Transform (Amplified-QFT) for solving the 
^ 1 following problem: 

The Local Period Problem: Let L = {0, 1...N - 1} be a set of N labels 
and let A be a subset of M labels of period P, i.e. a subset of the form 
A = {j : j = s + rP, r = 0, 1...M - 1} where P < \/W and M « N, and 
where M is assumed known. Given an oracle / : L — > {0, 1} which is 1 on A 
and elsewhere, find the local period P. A separate algorithm finds the offset 



The first part of this paper defines the Amplified-QFT algorithm. The 
second part of the paper summarizes the main results and compares the 
Amplified-QFT algorithm against the Quantum Fourier Transform (QFT) 
and Quantum Hidden Subgroup (QHS) algorithms when solving the local pe- 
riod problem. It is shown that the Amplified-QFT algorithm is, on average, 
quadratically faster than both the QFT and QHS algorithms. The third part 
of the paper provides the detailed proofs of the main results, describes the 
method of recovering P from an observation y and describes the algorithm for 
finding the offset s. 
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1. Introduction 

This paper creates and analyzes a new quantum algorithm called the Amplified 
Quantum Fourier Transform (Amplified-QFT) for solving the following problem: 

The Local Period Problem: Let L = {0, 1...N — 1} be a set of N labels and 
let A be a subset of M labels of period P, i.e. a subset of the form A — {j : j = 
s + rP, r = 0, 1...M — 1} where P < y/N and M << N, and where M is assumed 
known. Given an oracle / : L — > {0,1} which is 1 on A and elsewhere, find the 
local period P. A separate algorithm finds the offset s. 

The first part of this paper defines the Amplified-QFT algorithm. The second 
part of the paper summarizes the main results and compares the Amplified-QFT 
algorithm against the Quantum Fourier Transform (QFT) and Quantum Hidden 
Subgroup (QHS) algorithms when solving the local period problem. It is shown 
that the Amplified-QFT algorithm is, on average, quadratically faster than both 
the QFT and QHS algorithms. The third part of the paper provides the detailed 
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proofs of the main results, describes the method of recovering P from an observation 
y and describes the algorithm for finding the offset s. 

2. Background- Amplitude Amplification 

In rcf[4] Lov Grover specified a quantum search algorithm that searched for a 
single marked element xO in an N long list L. An oracle / : L — > {0,1} is used 
to mark the element such that f(x0) = 1 and / is elsewhere. Grover's quantum 
algorithm finds the element with a work factor of 0(y/~N) whereas on a classical 
computer this would take O(N), thereby obtaining a quadratic speedup. Grover's 
algorithm can be summarized as follows: 

a) Initialize the state to be the uniform superposition state \ip >= H\0 > where 
H is the Hadamard transform. 

b) Reflect the current state about the plane orthogonal to the state |x0 > by 
using the operator (I — 2\x0 >< x0\). 

c) Reflect the new state back around \ip > by using the operator (2 \ip > < ip\— I). 
This operator is a reflection about the average of the amplitudes of the new state. 

d) Repeat steps b) and c) 0{-/N) times until most of the probability is on |rr0 > . 

e) Measure the resulting state to obtain xO. 

Also in rcf [4] , Grover suggested this algorithm could be extended to the case of 
searching for an element in a subset A of M marked elements in an N long list L. 
Once again an oracle / : L — > {0,1} is used to mark the elements of the subset 
A. Grover's algorithm solves this problem with a work factor of 0(y/N/M). The 
elements of the set A are sometimes referred to as "good" and the elements not 
in A are called "bad". Grover's algorithm for this problem can be summarized as 
follows: 

a) Initialize the state to be the uniform superposition state \ip >= H\0 > where 
H is the Hadamard transform. 

b) Reflect the current state about the plane orthogonal to the state \xgood > by 
using the operator (I — 2\xgood >< xgood\), where xgood is the normalized sum of 
the good states defined by the set A. This changes the sign of the amplitudes of the 
good states defined by A. 

c) Reflect the new state back around \ip > by using the operator (2 \i[> > < 

d) Repeat steps b) and c) 0{y/N/M) times until most of the probability is on 
the set A. 

e) Measure the resulting state to obtain an element in the set A. 

Both versions of Grover's algorithm are also known as Amplitude Amplification 
algorithms, which are generalized even further in ref [9]. The first part of the 
Amplificd-QFT algorithm consists of the second of these algorithms, except for the 
final measurement step e). 

3. Background-Period Finding 

In ref [3], Peter Shor describes a quantum algorithm to solve the factorization 
problem with exponential speed up over classical approaches. He translates the 
factorization problem into one of finding the period of the function a x ModN where 
TV is the number to be factored and gcd(a, N) — 1. The period is found by making 
use of the QFT. Shor's factorization algorithm is summarized below: 

a) Find Q : N 2 < Q < 2N 2 

b) Find a : gcd(a, N) = 1 
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c) Find the period of a x ModN using the QFT and using the Qth root of unity 

- Form the superposition J2\ x > \a x ModN > 

- Apply the QFT to the first register \x >— > Y^^ xy \v > 

- Measure y 

- Form the continued fraction expansion of y/Q to find d/P 

- If \y/Q - d/P\ < 1/2N 2 and gcd(d, P) = 1 then P is recovered 

d) If the period is not even start over 
c) If a p / 2 + 1 = OModN start over 

f) Find gcd(aP/ 2 — 1, N) to find the factor of N. 

Step c) is the quantum part of Shor's factorization algorithm. We make use of 
the QFT and continued fraction expansion method to recover the period P in the 
second part of the Amplificd-QFT algorithm. 

4. The Amplified Quantum Fourier Transform Algorithm 

The Amplificd-QFT algorithm solves the Local Period Problem: 
The Local Period Problem: Let L = {0, 1...N - 1} be a set of N labels and 
let A be a subset of M labels of period P, i.e. a subset of the form A = {j : j = 
s + rP, r = 0, 1...M — 1} where P < \/W and M « N, and where M is assumed 
known. Given an oracle / : L — > {0,1} which is 1 on A and elsewhere, find the 
local period P. A separate algorithm finds the offset s. 

The Amplificd-QFT algorithm consists of the following steps where steps a) 
through d) are the Amplitude Amplification steps and steps e) through h) are the 
period finding steps that use the QFT: 

a) Initialize the state to be the uniform superposition state |V> >= H\0 > where 
H is the Hadamard transform. 

b) Reflect the current state about the plane orthogonal to the state \xgood > by 
using the operator (I — 2\xgood >< xgood\), where xgood is the normalized sum of 
the good states defined by the set A. This changes the sign of the amplitudes of the 
good states defined by A. 

c) Reflect the new state back around |-0 > by using the operator (2 \i[> > < ip\ — I). 

d) Repeat steps b) and c) 0(y/N/M) times until most of the probability is on 
the set A. 

e) Apply the QFT to the resulting state 

f) Make a measurement y 

g) Form the continued fraction expansion of y/N to find d/P 

h) If \y/N - d/P\ < 1/2N 2 and gcd(d, P) = 1 then P is recovered 

i) If gcd(<i, P) 7^ 1 repeat the algorithm starting at step a) 

The Amplificd-QFT algorithm produces the following states (See later sections 
for the detailed analysis of the Amplified-QFT algorithm): 



4sin- 1 ( v /M/JV) 



After applying steps b) and c) k times where k = 
the following state: 

\ipk >= a k ^2\z> +b k ^2 V- > 

where 

a k = JL sin(2/c + 1)8, b k = J cos(2fc + 1)0 



we arrive at 
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are the appropriate amplitudes of the states and where 



sin 6 = y/M/N, cos 9 = y/l - M/N 



The QFT at step e) performs the following action 



1 



N-l 



Z 



y=o 



After the application of the QFT to the state \ipk > , letting w = e- 2 ^l N we 
arrive at the following sate: 



At step f) we measure this state with respect to the standard basis to yield an 
integer y G {0, 1, ...,N — 1} from which we can determine the period P using the 
continued fraction method. 

In a later section where we summarize the main results, we provide a table 
showing the probabilities of measuring y for the Amplificd-QFT algorithm and 
compare them against the probabilites obtained by performing the QFT and QHS 
algorithms. 



The QFT algorithm does not include the amplitude amplification steps and 
consists of the following steps: 

a) Initialize the state to be the uniform superposition state \tp >= H\0 > where 
H is the Hadamard transform. 

b) Apply the oracle / to \ip > 

c) Apply the QFT to this state 

d) Make a measurement y 

e) Form the continued fraction expansion of y/N to find d/P 

f) If \y/N - d/P\ < 1/2N 2 and gcd(d, P) = 1 then P is recovered 

g) If gcd(d, P) ^ 1 repeat the algorithm starting at step a) 

At step b) after applying the oracle the state is given by (See later sections for 
the detailed analysis of the QFT algorithm): 




N-i r 



5. The QFT Algorithm 




jv-i 



At step c) the QFT applies the following action: 




N-l 



to get 
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At step d) we measure this state with respect to the standard basis to yield an 
integer y G {0, 1, ...,7V — 1} from which we can determine the period P using the 
continued fraction method. 



6. The QHS Algorithm 

The QHS algorithm is a two register algorithm and does not include the ampli- 
tude amplification steps. It consists of the following steps: 

a) Initialize the state to be the uniform superposition state >= H\0 > |0 > 
where H is the Hadamard transform. 

b) Apply the oracle / and put the result into the second register of \ip > 

c) Apply the QFT to the first register of this state 

d) Make a measurement y 

e) Form the continued fraction expansion of y/N to find d/P 

f) If \y/N - d/P\ < 1/2N 2 and gcd(d, P) = 1 then P is recovered 

g) If gcd(d, P) ^ 1 repeat the algorithm starting at step a) 

At step b) we have the following state (See later sections for the detailed analysis 
of the QHS algorithm): 

1 

After applying the QFT the state is given by: 

N-l N-l 

>=£^iy>I> x2 i/(z)> 

y=0 x=0 

At step d) we measure this state with respect to the standard basis to yield an 
integer y G {0, 1, N — 1} from which we can determine the period P using the 
continued fraction method. 



7. Summary of the Main Results 

We summarize the main results and compare the probability Pr(y) of measuring 
y in the final state arrived at for each of the three algorithms: 1) the Amplificd-QFT 
algorithm 2) the QFT algorithm and 3) the QHS algorithm. Here sin 9 = yjM/N 

andfc=^J -d < s ^ffff^ < M*. 
Case 1 (Amplified-QFT): 
The probability Pr(y) is given exactly by 

cos 2 2k9 if y = 

tan 2 6 sin 2 2k9 if Py = mod A, y 7^ 

-^tan 2 9 sin 2 2fc6> si £y^ff ) if Py ^ mod Aand MPy ^ mod N 



I if Py jt mod N and MPy = mod N 
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Case 2 (QFT): 

The probability Pr(y) is given exactly by 



I M 

Tv 5 



^^Pv/n) if ^ mod TVand MPy ^0 mod TV 

D if Py ^ mod and MPy = modiV 

Case 3 (QHS): 

The probability Pr(y) is given exactly by 

f l-^M if y = 

if Py = 0modN,y^0 



if y = 

if Py = 0modN,y^0 



2.1./- 



2 sin 2 (7rMPy/jV) 



JV 3 " 







if Py ^ mod TVand MPy ^ mod N 



if 7^ mod N and MPy = mod N 

We note that for the QFT and QHS algorithms Pr(y = 0) is very close to 1 
because M « N. In the cases where y ^ we compare the ratios of Pr(y) in the 
Amplificd-QFT and QFT case and then in the Amplified-QFT and QHS case. Let 
y be fixed such that either 

1. Py = mod N, y ^ or 

2. Py ^ mod TV and MPy ^ mod N 

and define Pr Ratio(y) = Pv{y)A mp iified-QFT/ Pr(y) QFT then we have the fol- 
lowing (see the later detailed sections) 



N 



AM N — M 



N N N , 

) > PvRatio(y) > — ( 



AM N — M N ' 



N 

PrRatio(y) « — 



and define Pr Ratio{y) = P*{y) Amplified-QFT / P*{v)qhs then we have the fol- 
lowing 



iV . A" , N N . N 2M x9 

AT 

=> PrRatio(y) w — 

Let Salg = {y : I ^ - p| < 2W,{d,P) = 1} be the set of "successful" y's. 
That is Salg consists of those y's which can be measured after applying one of the 
three algorithms denoted by ALG and from which the period P can be recovered 
by the method of continued fractions. Note that the set Salg is the same for each 
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algorithm. However the probability of this set varies with each algorithm. We can 
see from the following that given yl and y2, whose probability ratios satisfy the 
same inequality, we can add their probabilities to get a new ratio that satisfies the 
same inequality. In this way we can add probabilities over a set on the numerator 
and denominator and maintain the inequality: 

A> gM >BandA> g^ >B 

Q(yi) <9(y2) 
P(yl) + P(y2) 
Q(yl) + Q(y2) 
We see from the cases given above that 

N N Pr{S Amp uf ie d-QFT) N N _ 2M 2 

4M [ N-M'- Pt(Sq F t) ~AM^N-M' { n' 

where the difference between the upper bound and lower bound is exactly 1 and 
that 

N N PT(S Am plified-QFT) > N N _ 2M_ 2 

2M ( N-M'- Pt(Sqhs) ~ 2M N — M N 
where the difference between the upper bound and lower bound is exactly 2. 

This shows that the Amplificd-QFT is approximately^, times more successful 
than the QFT and ^ times more successful than the QHS when M « N. In 
addition it also shows that the QFT is 2 times more successful than the QHS 
in this problem. However, the success of the Amplificd-QFT algorithms comes 

at an increase in work factor of O(^Jj^). We note that in the case that P is a 

prime number that (d, P) = 1 is met trivially. However when P is composite the 
algorithms may need to be rerun several times until (d, P) = 1 is satisfied. 

Towards the end of the paper we show how to test whether a putative value of P, 
given s is known, can be tested to see if it is the correct value. We also investigate 
the case where s is unknown but is from a small known set of values such that the 
values of s can be exhausted over on a classical computer. We also show how s can 
be recovered by using a quantum algorithm using amplitude amplification followed 
by a measurement. 

8. The Amplified-QFT is Quadratically Faster than the QFT or the 

QHS 

We show that the Amplified-QFT algorithm is, on average, quadratically faster 
than the QFT or QHS algorithms. In order to show this, we use the geometric 
probability distribution which provides the probability of the first success in a 
sequence of trials where the probability of success is p and the probability of failure 
is 1 — p. For both the QFT and QHS algorithms a trial is one complete execution 
of the algorithm. Because the probability of measuring y = is close to 1 we expect 
to have to repeat the algorithm many times due to failure of measuring a successful 
y, before we have the first success. 

If X is the random variable which counts the number of trials until the first 
success then 



P(X = k) = (1 -p) k ~ 1 p for k = 1,2. 
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The expected value E[X] and variance V^ar[X] are given by: 

E\X} = - and VarlX] = 

p p z 

The workfactor of the Amplificd-QFT algorithm is given by the number of iter- 
ations of each amplification step followed by a single QFT step: 

For the QFT algorithm we have the probability of failure 1 — p is given by 



Pv(failure) = l-p> Pr(y = 0) = (1 - ^) 2 



then 



2M X , AM, M, 
Pr(succes S ) =p < 1 - (1 - — ) 2 = _(!-_) 

Then for the QFT algorithm, the expected number of trials until the first success 

is 

r^l 1 N N 

E X] = - > i-r- > 

11 p~ 4M(1 -f) ~ AM 

The workfactor of the QFT algorithm is the expected number of times the QFT 
has to be run, is given approximately by: 

<> 

Therefore the ratio of the expected work factor of the QFT algorithm and the 
work factor of the Amplified-QFT is given by 



ou 



— ) 

M' 

showing that the Amplificd-QFT algorithm is, on average, quadratically faster 
than the QFT algorithm. 

The variance in the number of times the QFT algorithm is run is given by 



rvi 1 ~P^r N ^2 t N-2M. 2 
VaT[X] = — > { N-M ) { ^M- ] 
For the QHS algorithm we have the probability of failure 1 — p is given by 

2M(N — M) 



Pr (failure) = l-p> Pr(y = 0) = 1 
then 

2M(N — M) 2M , M x 
PT(success) = p<l-(l ) = — (1 - — ) 

Then for the QHS algorithm, the expected number of trials until the first success 

is 
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The workfactor of the QHS algorithm is the expected number of times the QHS 
has to be run, is given approximately by: 

<> 

Therefore the ratio of the expected work factor of the QHS algorithm and the 
work factor of the Amplificd-QFT is given by 

showing that the Amplificd-QFT algorithm is, on average, quadratically faster 
than the QHS algorithm. 

The variance in the number of times the QHS algorithm is run is given by 

r n 1-P , N o (N — M) 2 + M 2 

Var\X] = > — — 2 P -£= 

L J n 2 ~ N — M 4M 2 ; 



9. The Amplified-QFT Algorithm - Detailed Analysis 

In this section we examine the Amplified-QFT algorithm in detail and produce 
the results for the probability of success that were summarized earlier in the paper. 

The Amplified-QFT algorithm is defined by the following procedure (see earlier 
section): 

Steps a) to d): Apply the Amplitude Amplification algorithm to the starting 
state |0 >. The resulting state is given by \ip k > (ref[4], ref[7],ref[l]) where k = 



4sin- 1 ( x /M/AT) 

\4>k >= a k ^2\z> +b k ^2\z> 

z£A z^A 

where 

a k = —^= sin(2fc + 1)0, b k = - 1 cos(2fc + 1)8 
are the appropriate amplitudes of the states and where 



sin 9 = ^M/N, cos 9 = y/l - M/N 

Now we have , ref[7], 

k =[fe\ fs-l<k<%i=^ %-8<(2k + l)9<z+9 
sin^ = cos(f -8)> cos(2fc+ 1)6> > cos(f + 9) = -sin0 
Notice that the total probability of the N-M labels that are not in A is 

(N - M)(-— L= cos(2fc + 1)9) 2 = cos 2 (2/j + 1)6 

=> cos 2 (2fc + 1)9 < sin 2 6 = B in 2 (siii- 1 ( J ^)) 



N ' 



cos 2 (2fc + 1)6* < — 
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whereas the total probability of the M labels in A is 



M(— L sin(2fc + l)6f = sin 2 (2fc + 1)6 = 1- cos 2 (2fc + 1)6* 



sin 2 (2fc + 1)6» > 1 - 



M 



Step e): Apply the QFT which performs the following action 



iV-l 



e -2^zy/N\ y > 



After the application of the QFT to the state \ipk > , letting uj = e 



_ -2-ni/N 



we 



have 



N-l 



N-1 



v z£A j/=0 v z$A y=0 

After interchanging the order of summation, we have 

N-1 



y =0 L ViV zeA ViV z4A 



\y> 



Steps f) to i): Measure with respect to the standard basis to yield a integer 
y G {0, 1, ...,N— 1} from which we can determine the period P using the continued 
fraction method. 

The amplitude Amp(y) of \y > is given by 



Amp(y) = J2 = Y u >v + -%Yu> 
^kk ^zTa 



--;/ 



N-1 



^ ftA 



(gfc - &fc) 

(gfc - h ). 



M-l 



JV-l 



r=0 



M-l 



bk 



2 = 

JV-1 



r=0 VJV z=0 



2 1/ 



We calculate the Pr(y) for the following cases: 

a) y = 

b) Py = mod N and y ^ 

c) Py 7^ OmodA 



9.1. Amplified-QFT Analysis: y=0. We have 
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Amp(y) 



a*; 



We have 



zGA 



Vn 



1 
1 



(Ma k + {N- M)b k ) 

M , s N-M 

sin(2/c + 1)0 + —j= cos(2fc + 1) 



M 



y/N — M 



M 



sin(2fc + 1)0 + \j 1 - — cos(2fc + 1)0 



sin sin(2fc + 1)0 + cos cos(2£; + 1)0 
cos(2fc0) 



Pr(y = 0) = cos 2 (2/c0) 



9.2. Amplified-QFT Analysis: Py = Omod N,y ^ 0. Using the fact that 

£-~t 1 — t.iV ' r 



we have 



1 -cj^ 

z=0 



< h \ M_1 u N ~ 1 

v r=0 v z=0 

= (ofc_M ^ sy y- 1 ^py 

\/]V 

= -p== sin(2fc + 1)0 - - cos(2fc + 1)0 

y/NM y/N(N - M) 



" sy V f ( sin ( 2fc + ^ - V i^wjn cos(2fc + w 

^(sin(2fc + 1)0 - ^ cos(2fc + 1)0) 
N cos 

' tan sin 2fc0 



We have 



Pr(y) = tan 2 9 sin 2 2/c0 
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Using k = [f e \ =>■ f e 1 < k < f g 
s'm2k9 < 1 we have 



§ - 29 < 2k6 < § sin(f - 2(9) < 



> Pr(y) = tan 2 9 sin 2 2fc0 > tan 2 9 sin 2 (J - 20) 

Ift^m ~ Pr(y) " tan2esin2 (f - 20 ) 



AT 



— ( 

iV V 

M 

AT \ 



N 


N 


- M 




N 


N 


-M 




N 


N 


-M 



) > Prfo) > 



sin 2 9 
cos 2 9 



cos 2 29 



)>P^)>^(2cos 2 0-l) 2 
)>Pr(y)>-(— — ) 2 



N N — M 



N 



9.3. Amplified-QFT Analysis: Py ^ OmodiV. Making use of the previous re- 
sults we have 



_ K - &fc) , ,sy 



M-l 



JV-1 



r=0 



(«fc M ^sa ^ w rPj 
r=0 



\/iV 



1-w 



/TV 

M y/Jf 

—u sy t&n9sm2k9 
M 



1-Lj p y _ 

1 - cj mp ^ 



1 -w p f 
1 - W MP ^ 



Making use of the following identity 



we have 



and so 



II - e 



1 - W MP ^ 



i0|2 



4sin 2 (6>/2) 



sin 2 (7rMPy/iV) 
sin 2 (7rPy/iV) 



Pr(y) = -- tan 2 9 sin 2 2k9 



sin 2 (irMPy/N) 



1 

M 2 """ sin 2 (7rPy/iV) 
Using the previous result fijArj) > tan 2 9 sin 2 2fc<9 > and 



letting P = we have 



1 M. AT , N 1 M . N .. 2M, 9 

—r- — i? > Pr(y) > —7— — — ) 1 - — P and so 

M 2 N N — M ~ ~ M 2 N N — M N 

1 . N . , N 1 , N w 2M N2 



iVM N — M ~ iV Af N — M N 

We notice that if in addition MPy = OmodiV then Pr(y) = 0. 
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9.4. Amplified-QFT Summary. The probability Pr(y) is given exactly by 

cos 2 2k9 if y = 

tan 2 e sin 2 2k9 if Py = mod N,y ^ 

^tan 2 9 sin 2 2fc <^^ff > if Py ^ mod ATand MPy ^ mod JV 

k if Py ^ mod N and MPy = mod N 

10. The QFT Algorithm - Detailed Analysis. 

In this section we examine the QFT algorithm in detail and produce the results 
for the probability of success that were summarized earlier in the paper. We just 
apply the QFT to the binary oracle f, which is 1 on A and elsewhere. 

We begin with the following state 



JV-l 



\tL>=^r= y i«>®4=(io>-ii 



> 



z=0 



and apply the unitary transform for f, Uf , to this state which performs the following 
action: 

Uf\z > \c >= \z > \c®f(z) > 

to get the state \ip > 

1 1 

i^>=^Ei-> 7! (i >-i 1 » 



z=0 



(-i)5>>+5>> 

zEA z(£A 
JV-l 



z£A 



2 = 



V2 
1 

71 



;io>-ii>) 

(|0>-|1>) 



Next we apply the QFT to try to find the period P, dropping (|0 > — 11 >). 
The QFT applies the following action: 

1 N ~ 1 
\z >^ —= uj zy \y > 



to get 



JV-l 

|^>=E 

v=o L 



(-2) 

jV 



JV-l 



E^ + ^E 



z£A z=0 

We calculate the Pr(y) for the following cases: 

a) y = 

b) = mod jV and y ^ 



12/ > 
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c) Py ^ OmodiV 
10.1. QFT Analysis: y = 0. We have 



Amp(y) = L^l + 
zeA 
(-2)M N 



N-l 



N N 
2M 



Therefore, in the QFT case, we have Pr(y = 0) is very close to 1 and is given by 

4M M 2 ( 2M\ 2 

whereas in the Amplified-QFT case we have Pr(y = 0) is given by 

Pr(y = 0) = cos 2 2k6 



10.2. QFT Analysis: Py = mod TV, y ^ o. Using the fact that 

N-i , Ny 

t-~< 1 - i,>y 



we have 



l -ojy 

z=Q 



-2 1 N ~ 1 

Amp(y)= + 

zeA z=0 
M-l 

= — UJ SV 

-2M „„, 



N 

Therefore in the QFT case we have Pr(y) is given by 

M 2 

PrQ/)=4— 

whereas in the Amplified-QFT case we have Pr(y) is given by 

Pr(y) = tan 2 6>sin 2 2k6 

We can determine how the increase in amplitude varies with the number of iterations 
k of the Grover step in the Amplified-QFT by examining the ratio of the amplitudes 
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of the Amplificd-QFT case and QFT case. This ratio is given exactly by 
AmpRatio(y) = — 



(ak —bk) , ,syjy[ 



-2M 
N 

(ak - b k ) 



-2 



Vn 



-2 
N 



sin(2fc+ 1)6> 



-2M 



M 

tan6*sin2fc0 

M / N 



N 



N-M 



cos(2fc+ 1)(9 



Using = LsJ and making use of f (^) >tan 2 0sin 2 2fc0> f(^)(^2M) 2 , 
we have the following inequality for the PvRatio(y), the increase in the probability 
due to amplification: 



N , N N , N N , N ., 2M, 9 



Pr Ratio(y) 



N 
AM 



10.3. QFT Analysis: ^OmodiV. We have 



JV-l 



zy 



zeA 

M-l 

= — wSV X] 



2 = 



rPy 



N 
-2 

-2 
Af 



r=0 
1 - 



-r 



l - w Mp y 



l - uj p y 



Once again, making use of the following identity 

|l-e* e | 2 = 4sin 2 (0/2) 
in the QFT case, we have Pr(y) is given by 



Pr(y) = 



A 2 



sin 2 (7rMPy/Ar) 
sin 2 (7rPy/A) 



whereas in the Amplified-QFT case we have Pr(y) is given by 

tw n 1 2n ■ 2„, n sm 2 (irMPy/N) 

Pr(y) = —tan 2 9 sin 2 2k9 ^- ^— - 

W M 2 sin 2 (irPy N) 



We notice that if in addition MPy — Omod A then Pr(y) = 0. 
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The ratio of the amplitudes of the Amplificd-QFT case and QFT case is given 
exactly by 



AmpRatio(y) = 



(a-k-bk) . ,s 



—w s y 

N w 

{a.k - h) 



1-UjMPy 



-2 



N 



1 

^2 

N 



-2M 



N 

' — sin(2fc+ 1)0- 
M 



tan0sin2fc0 



N 



N-M 



cos(2fc+ 1)(9 



We note that this ratio is the same as in that given in the previous section and is 
independent of y. The variables in this ratio do not depend in anyway on the QFT. 

As in the previous section, we have the following inequality for the Pr Ratio(y), 
the increase in the probability due to amplification when k = \_fg\ and making use 
M < N r ) >tan 2 0sin 2 2fc0> f( * )( jv-2A^ 2 



N v N-M ) 



N 



-r 



N 



AM N ~ M 



) > Pr Ratio(y) > — ( 



AM N — M N ' 



N 

Pr Ratio(y) ~ 

vy; AM 



10.4. QFT Summary. The probability Pr(y) is given exactly by 



A§^ if Py = 0modN,y^0 

^■^Py/N) if ^OmodAandMPy^OmodA 
if Py ^ mod N and MPy = mod N 



11. The QHS Algorithm - Detailed Analysis 

In this section we examine the QHS algorithm in detail and produce the results 
for the probability of success that were summarized earlier in the paper. The QHS 
algorithm is a two register algorithm as follows (see ref[13] for details). We begin 
with |0 > |0 > where the first register is n qubits and the second register is 1 
qubit and apply the Hadamard transform to the first register to get a uniform 
superposition state, followed by the unitary transformation for the Oracle f to get: 

1 N ~ 1 

Next we apply the QFT to the first register to get 
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JV-1 1 N-l 

\^>=-mY.-mY," xv \y >!/(*)> 



v x=0 v i/=0 
JV-1 , JV-1 



JV-1 N-l 



N-l 



x=0 



y=o 



where 



N 



N-l 



iito> 



\T(y) >= J2 " XV \f(x) > 



x=0 



xeA x^A 



and where 



iito> 



x£A 



E< 

x^A 



Next we make a measurement to get y and find that the probability of this mea- 
surement is 

"TO>|| 2 



Pr(y) = 



N 2 



1 

N 2 



1 

iV 2 " 



E^ 

x*£A 



The state that we end up in is of the form 



\4> >= \y > 



TO > 



IITO>|| 

We calculate the Pr(y) for the following cases: 

a) y = 

b) Py = OmodiV and y ^ 

c) Py ^ OmodiV 



11.1. QHS Analysis: y = 0. We have 

2 



Pr(y) = 



1 

M 2 



E 



1 

iV2 



z^A 



+ 



(AT - M f _ M 2 + N 2 - 2NM + M 2 



1 



N 2 N 2 
2M(N - M) 



N 2 



N 2 
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whereas in the Amplified-QFT case we have Pr(y = 0) is given by 

Pr(y = 0) = cos 2 2k6 

11.2. QHS Analysis: Py = mod N,y ^ 0. We have 



1 

w 

1 

A 2 

2M 2 



E 


LU XV 


xeA 






M-l 


u sy 


E 




r=0 




M-l 


LO Sy 


E 




r=0 



+ 



1 

A 2 

2 



x4A 



rPy 



E^ 
E ^ 



i 

~N2 



x4A 



rPy 



1 

]V2 



M-l 



r=0 



jV 2 



where we have used the fact that 



N-l 



J2 u xy = 



£C = 



JV-1 



x=0 



In the Amplified-QFT case we have Pr(y) is given by 

Pr(y) =tan 2 9 sin 2 2fc6> 

By comparing the results of the QHS and the Amplified-QFT algorithms we have 
the following inequality for the Pr Ratio(y) = Pr(y) Amplified-QFT / P^(v)qhs , the 
increase in the probability due to amplification when k — \_j§\ and making use of 
f (A) > tan 2 * sin 2 2k0 > #(^)(™) 2 



A , A 



2M <y N - M 



)>YrRatio{y)>—{ 



N , A 



Pr Ratio(y) 



2M N — M 
A 
2M 



11.3. QHS Analysis: Py^OmodA. We have 



Pr(y) 



1 

A 2 
1 

A 2 



+ 



1 

A 2 

1 

A 2 



xEA 

M-l 
W «V UJ rPy 
r=0 
M-l 

- sy E- 

r=0 



1 

A 2 

2 



E^ 

x^A 



+ 



rPy 



1 - uj MPy 

2 sin 2 (irMPy/N) 
A 2 s in 2 (nPy/N) 



TV 2 

1 
TV 2 " 

2 

+ 



E< 



M-l 



JV-1 



1 E • t E 



r=0 



A 



A 2 



1 - w Mp y 



l -u p y 



x=0 
2 
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where we have used the fact that 



and that 



N-l 

£< 

x=0 



,xy _ 



i9\2 



4sin 2 (<9/2) 

In the Amplified-QFT case we have Pr(y) is given by 

Pr (y) = —tan 2 6 sin 2 2k6 ^- ^— - 

vy; M 2 sin 2 {wPy/N) 

We notice that if in addition MPy — OmodiV then Pr(y) = 0. 

By comparing the results of the QHS and the Amplified-QFT algorithms we have 
the following inequality for the Pr Ratio(y) = Vv{y) Amplified-QFT / Pr(y) QHS , the 
increase in the probability due to amplification when k — \_jg\ and making use of 

Ml N \ ^ -2 /)„• 2 > a ^ Ml N \iN-2M\2 



JV \N-M 



N 



N 



— ( 

2M K N -M 



)>PrRatio(y) > — ( 



— ( — — — )(1 — ?^) 2 
2M V A- M A AT ; 



Pr Ratio(y) 



N 
2M 



11.4. QHS Summary. The Pr(y) in the QHS case is: 



-, 2M(N-M) 
1 

2M 2 
TV 2 " 

2 sin 2 (7rMPy/jV) 



if y = 

if Py = mod N,y ^ 



& Z£«Py,N) if -P?/ 7^ mod AT and MPy 7^ mod 



N 



if Py ^ mod N and MPy = mod N 

12. Recovering the Period P and the Offset s 

As in Shor's algorithm, we use the continued fraction expansion of y/N to find the 
period P, where y is a measured value such that y/N is close to d/P and (d, P) = 1 
. See ref[2] and ref[3]for details which we provide below. 

Let{a}Ar be the residue of amodAf of smallest magnitude such that —N/2 < 
{a} N < N/2. Let S N = {0, 1, ...,N— 1}, S P = {d e S N : < d < P} and Y = {y e 
Sn ■ \Py\ < P/2}. Then the map Y -> S P given by y -)• d = d(y) = round(Py/N) 
with inverse y = y(d) = round(Nd/P) is a bijection and {Py}jv = Py — Nd(y). 
In addition the following two sets are in 1-1 correspondence {y/N : y <G Y} and 
{d/P :0<d<P}. 

We make use of the following theorem from the theory of continued fractions 
ref[5] (Theorem 184 p.153): 

Theorem 1. Let x be a real number and let a and b be integers with b > 0. 
If \x — || < then the rational a/b is a convergent of the continued fraction 
expansion of x. 
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Corollary 1. If P 2 < N and \{Py}N\ < -j then d{y)/P is a convergent of the 
continued fraction expansion ofy/N. 

Proof. Since {Py}N = Py — Nd(y) we have 
\Py-Nd(y)\ < f or 
\y_ _ d (v) I < J_ < l 

I N P I — 2N — 2~W 

and we can apply Theorem 1 so that d/P is a convergent of the continued fraction 
expansion of y/N. □ 

Since we know y and N we can find the continued fraction expansion of y/N. 
However we also need that (d, P) = 1 in order that d/P is a convergent and enabling 
us to read off P directly. The probability that (d, P) = 1 is <p(P)/P where <fi(P) is 
Euler's totient function. If P is prime we get (d, P) = 1 trivially. 

By making use of the following Theorem it can be shown that > - — \ n \ n N 
, where e(P) is a monotone decreasing sequence converging to zero. 



Theorem 2. liminf 



N/ In In TV 



where 7 = 0.57721566 is Euler's constant and where e 7 = 0.5614594836. 
This may cause us to repeat the experiment 0( t { N ) times in order to get 
(d,P) = l. 

We note that we needed to add a condition on the period P that P 2 < N or 
P < y/N in order for the proof of the corollary to work. 

12.1. Testing if Pi = P when s is known or is 0. We can easily test if s = 
by checking to see if /(0) = 1. 

Now given a putative value of the period Pi and a known offset or shift s, how 
can we test whether P 1 — P ? 

Assuming we have access to the Oracle to test individual values, we can confirm 
f(s) = 1 since s is known. We will show that if f(s+ Pi) = 1 and f(s+(M— l)Pi) 
I then Pi = P. 

Case 1: If Pi > P then s + (M - l)Pi > s + (M - 1)P. But s + (M - 1)P 
is the largest index x such that f{x) = 1. Therefore if Pi > P we must have 
/(s+(M-l)Pi) = 0. 

Case 2: If < Pi < P then s < s + Pi < s + P but between s and P there 
are no other values x such that f(x) = 1. Therefore if < Pi < P we must have 
f(s + P 1 )=0. 

Therefore if f(s) = 1, f(s + Pi) = 1 and f(s + (M - l)Pi) = 1 we must have 
P =P 

12.2. Testing if (si, Pi) = (s, P) when s is from a small known set and s 7^ 0. 

If we assume s is unknown and s ^ but is from a small known set of possible 
values such that we can exhaust over this set on a classical computer and we are 
given a putative value of the period Pi, how can we test whether a pair of values 
(si,Pi) is the correct pair (s, P) ? 

We need only test whether /(si) = 1, f(si + Pi) = 1 and /(si + (M - l)Pi) = 1 
where M is assumed known. 

Case 1: If Si < s then f(s\) — since s is the smallest index x with f(x) = 1. 

Case 2: If si > s and /(si) = 1 then si = s + rP with r > . If f(si + Pi) = 1 
then si + Pi = s + tP = Si + (t - r)P with t > r > 0. Hence Pi = (t - r)P > 0. If 
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/(si + (M-l)Pi) = 1 thensi + (M-l)Pi = s+rP+(M -\){t-r)P > s+(M-l)P 
which is the largest index x with f(x) = 1. Therefore f(s\ + (M — l)Pi) = 0. 

Hence if /(si) = 1, /(si + Pi) = 1 and /(si + (M - 1)P X ) = 1 we must have 
Si = s and then by following the case when s is known we must also have Pi = P. 

Therefore if one or more of the values /(si), f(s\ + Pi), /(si + (M — l)Pi) is 
zero, either si or Pi is wrong. For a given Pi we must exhaust over all possible 
values of s before we can be sure that Pi ^ P. For in the case that Pi ^ P, we 
will have for every possible si that at least one of the values /(si), /(si + Pi), 
/(si + (M — l)Pi) is zero. In such a case we must try another putative Pi. 

12.3. Finding s ^ using a Quantum Computer. We can assume s ^ as the 
case s = is trivial and was considered above. Let s = a + f3P where a = s mod P 
so that < a < P - 1 and < a + @P + (M - 1)P < N - 1. 

We assume we are given the correct value of P If P is wrong, it will be detected 
in the algorithm. 

Step 1: 

We create an initial superposition on N values 

1 N ^ 

and apply the Oracle / and put this into the amplitude. We then apply Grover 
without measurement to amplify the amplitudes and we have the following state 

\ipi >= a k ^2\x > +b k ^ \ x > 

where 

a k = -i= sin(2/c + 1)6, b k = ^^_ M c°s(2fc + 1)0 

are the appropriate amplitudes of the states and where 

sin 9 = ^/M/N, COS0 = yjl - M/N 

Next we measure the register and with probability exceeding 1 — M/N we will 
measure a value x\ £ A where x\ = s + nP with < n < M — 1. Note that the 
total probability of the set A is given by 

Pr(x e A) = M{-^= sin(2fc + 1)6>) 2 = sin 2 (2/c + 1)6 = 1- cos 2 (2fc + 1)6 

Pr(.x e A) = sin 2 (2/c + 1)6 > 1 - ^ 

Now using our measured value x\ = s + r\P with < r\ < M — 1 we check that 
f(xi) — 1 and f(xi — P) = 1. If f(xi — P) = then either the value of P we are 
using is wrong or we have r\ = and x x — s. If we test f(s) = 1, f(s + P) = 1 and 
f(s + (M — 1)P) = 1 then we have the correct P and s otherwise P is wrong. So 
assuming f{x\ — P) = 1 we must have either the correct P or a multiple of P. We 
can use the procedure in Step 2 or Step 2' to find s. The method in Step 2 uses the 
Exact Quantum Counting algorithm to find s (See ref[ll] for details). The method 
in Step 2' uses a method of decreasing sequence of measurements to find s. 

Step 2 (using the Exact Quantum Counting algorithm): 
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Let T be such that T > M is the smallest power of 2 greater than M. We form 
a superposition 

1*1 >=^X>>io> 

v x= 

and apply the function g(x) = Max(0,xi — (x + 1)P) where x\ = s + r\P is our 
measured value, with < n < M — land put the values of (7(2) into the second 
register to get 

1 T_1 

|V2 >= \ x > l 5 ^) > 

v a;— 

Notice that as x increases from 0, g(x) is a decreasing sequence s + rP with r = 
(n — x — 1). When g(x) dips below we set g(x) = to ensure g(x) > 0. Now we 
a Pply / to g(x) and put the results into the amplitude to get 

1*3 >=-^J2(-l) f{3(x)) \x>\ g (x)> 

Notice that f(g(x)) — 1 when s < g(x) < s + r\P and is elsewhere. We 
apply the exact quantum counting algorithm which determines how many values 
f{g{x)) = l.Let this total be R. If P is correct we expect R = n and we can 
determine s = x\ —RP = s + r\P — RP. We can then test if we have the correct pair 
of values s, P by testing whether f(s) = 1, f(s + P) = 1 and f(s + (M - 1)P) = 1. 
If this test fails then P must be an incorrect value and we must repeat the period 
finding algorithm. 

We use Theorem 8.3.4 of ref[ll]: The Exact Quantum Counting algorithm re- 
quires an expected number of applications of Uf in 0(yj (R + 1)(T — R + 1) and 
outputs the correct value R with probability at least 2/3. 

Step 2' (decreasing sequence of measurements method): 

Let T be such that T > M is the smallest power of 2 greater than M. We form 
a superposition 

1 T_1 

and apply the function g(x) = Max(0, x\ — (x + 1)P) where x\ = s + r\P with 
< r\ < M — land put these values into the second register to get 



1* 2 >= 4f £ i x > if > 



T-1 

Notice that as x increases from 0, g(x) is a decreasing sequence s + rP with 
r = (n — x — 1). When g(x) dips below we set g(x) = to ensure g{x) > 0. Now 
we apply / to g(x) and put the results into the third register and then into the 
amplitude. 



1*3 >=^£{-l) f{a{x)) \x>\g{x)> 

* x=0 
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Notice that f(g(x)) = 1 when s < g(x) < s + r\P and is elsewhere. 

We then run Grover without measurement to amplify the amplitudes and mea- 
sure the second register containing g{x). 

With probability close to 1 we will measure a new value x 2 = s + r 2 P with 
< r 2 < n. We test the values f(x 2 ) = 1 and f(x 2 - P) = 1. If f(x 2 - P) = 
then either the value of P we are using is wrong or we have r 2 — and x 2 = s. 
If we test f(s) = 1, f(s + P) = 1 and /(s + (M - 1)P) = 1 then we have the 
correct P and s otherwise P is wrong. So assuming /(x2 — P) = 1 we must have 
either the correct P or a multiple of P. We repeat this algorithm and go to Step 2' 
replacing the value x\ in the function g(x) with x 2 etc. As we repeat the algorithm 
we will measure a decreasing sequence of values x\,x 2 ... that converges to s. This 
procedure will eventually terminate with the correct pair of values P and s or we 
will determine that we have been using an incorrect value of P and we must repeat 
the quantum algorithm for finding putative P and repeat the process. 

How many times do we expect to repeat Step 2'? When we make our first 
measurement we expect n = M/2. For our second measurement we expect r 2 = 
ri/2 etc. Therefore we expect to repeat this algorithm 0( ln 2 (M)) times. 



13. Replacing the QFT With a General Unitary Transform U 

In general, if we had any Oracle / which is 1 on a set of labels A and else- 
where and we replaced the QFT with any unitary transform U which performs the 
following 



-= a{y lZ )\y 



> 



we can compute the AmpRatio(y) — Amph AmpMvAe(u) de ^ as f° nows - 
As before, we have the following state after applying Iff. 



1 



N-l 



(-2)]T|z> + 5>> 



zeA z=0 

Next wc apply the general unitary transform U to obtain the state 



JV-l 

u\i>>= Y 

y=o L 



(-2) 
N 



N-l 



Y^y'^ + jj Y a (y> z ) 



zGA 



2=0 



\y > 



In the Amplined-U case we apply Grover without measurement followed by U wc 
obtain the state 



JV-l 

b k >= y 

y=o 



(ofc - bk) 



Y a (y> z ) + -%Y a (y> z ^ 

zeA Viv z=0 



N-l 



N 



z£A 



\y > 



If ~Y^ = q <y{y, z) = and X^zeA a (V' z) ^ we get the same AmpRatio(y) formula 
that we obtained when U = QFT 
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AmpRatio(y) — — 



■JW 



(-2) 
N 



(ofc - 6fe) 



N 



-2 
AT 



sin(2fc + 1)6 



-2M 



M 

tan#sin2fc0 



N 



N-M 



cos(2fc+ 1)6* 



This gives 



Pr Ratio(y) 



N 2 
AM 2 



tan 2 6 sin 2 2k0 



As in the case when U=QFT, we have the following inequality for the Pr Ratio(y) 
for a general U, the increase in the probability due to amplification when k — \_jg\ 
and making use of f(^) > tan 2 0sin 2 2fc0 > f(^)(™) 2 

( ) > Pr Ratio(y) > ( )(1 2 

A^ 

=^> Pr Ratio{y) w — 
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